Intuit, Inc.

Kishore Jonnalagedda

Peter Allen Vogel

Douglas L Foiles

Shrisha Radhakrishna

Soumendra Daas

Bibhakar Ranjan

Timothy E Hobson

Vinod K Nair

Wing Ming Brigitte Chan

The disclosed embodiments provide a system that enables access to a resource. During operation, the system obtains, from a first service, a request for access to the resource on a second service by a user using the first service. Next, the system provides, in a response to the request, an intent token for accessing the resource by the user to the first service. Upon receiving the intent token from an authorized user on the second service, the system enables access to the resource on the second service for the user on the first service.

User authorization using intent tokens

One embodiment of the present invention relates to a system that enables a user of an application that runs natively on a client to obtain access to a web resource that is affiliated with the native application. First, the native application obtains an access token from a Central Authentication Service (CAS). Next, the native application sends a secure request for a one-time use session token to the CAS. If the CAS determines the request is valid, the CAS initializes a session token and sends the session token to the native application. After receiving the session token, the native application directs a browser to an endpoint server, appending the session token to the browser's request. Finally, the endpoint server initializes an authenticated session wherein the authenticated session is scoped to the desired web resource.

Transitioning a logged-in state from a native application to any associated web resource

Growing community of inventors

San Jose, CA, United States of America

Kishore Jonnalagedda